DarkKill

Reported Context (1)

Uses Bring Your Own Vulnerable Driver (BYOVD) techniques to disable security protections, deploying tools such as DarkKill and HRSword to terminate EDR solutions. Qilin Ransomware Group Expands Cross-Platform Operations and Extortion Tactics

CVE (2)

Malware (2)

Threat Actors (1)

MITRE ATT&CK (25)

Products (7)

Tools (8)

Industries (4)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.